Added cors exapmle and credential support to applications/cors.

I get session.js directly from carcass-auth. Not sure if it's what you want. 
Thanks.